RDN/Trojan/Hacking File Detected" virus: what it is and how to remove it

"RDN/Trojan/Hacking File Detected" is a fake security warning that is delivered on a malicious website. This example of tech support scam claims that computer was infected with a virus and due to the attack, user's personal information might be stolen.

Facts checked October 7, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.

Automatic

Get a free scan and check if your PC is infected.

Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.

If RDN/Trojan/Hacking File Detected" virus keeps coming back after uninstalling, a scan can find what reinstalls it.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.

Do it yourself · free Remove RDN/Trojan/Hacking File Detected" virus yourself 5 steps, about 15 minutes, no software needed.

Start the steps
RDN/Trojan/Hacking File Detected" virus: rdn trojan hacking file detected scam
RDN/Trojan/Hacking File Detected" virus as our 2017 report showed it.

RDN/Trojan/Hacking File Detected" virus: summary

Detection namesNo Microsoft detection name is known
DistributionNot recorded in the old report
DamageNot recorded in the old report
NameRDN/Trojan/Hacking File Detected" virus
TypeLoader
SymptomsAn unknown program in Installed apps
Removal

Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.
Show 3 more facts
Evidence5 write-ups by security sites; details still limited
First seen6 October 2017
Facts checked7 October 2026

What RDN/Trojan/Hacking File Detected" virus does on an infected PC

From our report of Oct 2017 · not reviewed since

Be aware of the new "RDN/Trojan/Hacking File Detected" technical support scam

"RDN/Trojan/Hacking File Detected" is a fake security warning that is delivered on a malicious website.

This example of tech support scam claims that computer was infected with a virus and due to the attack, user's personal information might be stolen. In order to solve this problem, users are asked to call "Windows Technical Support" via 1-800-894-0551.

We can assure that this number does not belong to Microsoft. However, your computer might be infected, but not with a hazardous data-stealing malware. You might have been redirected to this website by a potentially unwanted program (PUP) known as an adware. Thus, the so-called "RDN/Trojan/Hacking File Detected" virus may have arrived on your PC in a software bundle.

Once users enter "RDN/Trojan/Hacking File Detected" tech support scam website, they receive a pop-up message telling about error code 0x000019F. However, it's a non-existent code created by cyber criminals. Crooks also give a description of the error:

Authors of the "RDN/Trojan/Hacking File Detected" scam also give a long list of the supposedly detected Trojans on the computer. Cyber criminals use scare tactics and play on peoples' fears to lose personal information. However, calling the provided number and talking with scammers might lead to an actual money or data loss.

If you were redirected to this scam website, you should not be tricked. Never forget that security alerts by Microsoft or antivirus programs do not appear in the browser's window. Therefore, close the tab and focus on "RDN/Trojan/Hacking File Detected" removal.

This redirect might be just a one-time activity which might happen if you visit a high-risk website. However, if your browsing sessions are continuously redirected to this site, you'd better employ a professional anti-spyware, such as and let it remove "RDN/Trojan/Hacking File Detected" adware.

RDN/Trojan/Hacking File Detected" virus: rdn trojan hacking file detected scam
RDN/Trojan/Hacking File Detected" virus in our 2017 report.

From our report of Oct 2017 · not reviewed since

"RDN/Trojan/Hacking File Detected" scam campaign aims at British computer users

Researchers spotted the same virus attacking British computer users.

The scam website delivers the same error message and wants to convince that user's passwords, browsing history, credit card information and online banking history may have been compromised.

However, this time scammers ask to call "Local Windows Support" at 0208 133 6658 and notes that this number is only for the UK users. Though, you should not get tricked by this scam. This phone number belongs to cyber criminals that might be interested in stealing your personal information or install malware on your computer.

RDN/Trojan/Hacking File Detected" virus: rdn trojan hacking file detected virus
RDN/Trojan/Hacking File Detected" virus in our 2017 report.

From our report of Oct 2017 · not reviewed since

Be careful with freeware downloads

The ad-supported program which is responsible for redirecting to "RDN/Trojan/Hacking File Detected" site often arrives in the system in the software bundles.

It means that when you download freeware, you have to check for additional downloads by using Advanced/Custom setup. If you see the list of third-party apps that are called "optional downloads," make sure that these entries are not selected for the installation.

However, if you rely on Quick/Recommended setup, you will not get a chance to monitor and adjust freeware installation. Therefore, you should avoid using this setup to protect your PC from unwanted apps.

From our report of Oct 2017 · not reviewed since

Getting rid of to "RDN/Trojan/Hacking File Detected" malware

Redirects to the technical support scam website are often triggered by an adware.

Therefore, in order to stop this suspicious activity, you have to remove to "RDN/Trojan/Hacking File Detected" PUP from the device.

However, if you want quick and effective results, you should opt for the automatic to "RDN/Trojan/Hacking File Detected" removal. It is performed using updated anti-malware tool. Once the system scan is finished, do not forget to reset each of your browsers!

From our report of Oct 2017 · not reviewed since

More from our earlier report on RDN/Trojan/Hacking File Detected" virus

  • ERROR DESCRIPTION: Error Code: 0x000019F Position Reason: Security Breach/Virus Attack Affected Entity: Personal Data, Banking/Credit Card Deatails Action Required: Don't turn off or reboot your computer as it may lead to data loss and computer crash.

How to remove RDN/Trojan/Hacking File Detected" virus

A loader's job is to install other malware, so treat the PC as infected with more than one program until the scans are clean.

  1. Step 1: Delete scheduled tasks that bring it back

    Programs like RDN/Trojan/Hacking File Detected" virus add a scheduled task so they return after an uninstall or reopen a page at every sign-in. Start Task Scheduler, open Task Scheduler Library and sort by Last Run Time to see what ran recently.

    On the Actions tab, a program in a user folder, a script or a web address is a warning sign; right-click such a task and choose Delete.

    Tasks with names copying Google, Edge or Windows updaters but pointing to an odd folder are typical. The tool looks the same in Windows 11 and Windows 10.

    Task Scheduler Library with a task selected and its Actions tab showing the program it starts
    Windows 11: Task Scheduler Library, the task selected, the Actions tab shows the file it runs.

    Full procedure with screenshots: Remove what malware leaves behind in Windows

  2. Step 2: Remove it from startup

    Press Ctrl + Shift + Esc to open Task Manager and select Startup apps (Windows 11) or the Startup tab (Windows 10). Disable entries you do not recognise, especially ones with no publisher or with a name that copies a Windows component.

    Right-click an entry and choose Open file location to see where it runs from: programs in %AppData% or %Temp% deserve a closer look. Some entries are not listed there but in the registry Run keys, which the procedure below shows how to check.

    Full procedure with screenshots: Stop apps from opening at startup On uGetFix

  3. Step 3: Delete the folders left behind

    Uninstalling often leaves the program's folders, and some threats reinstall themselves from them.

    Press Windows + R, type %LocalAppData% and press Enter, then do the same for %AppData% and %ProgramData%, and look for folders named after RDN/Trojan/Hacking File Detected" virus, its publisher or created on the day the problem started.

    Delete those folders, and check C:\Program Files and C:\Program Files (x86) too.

    If Windows says a file is in use, end it in Task Manager or delete the folder after a restart in Safe Mode. The folders are the same in Windows 11 and Windows 10.

    Full procedure with screenshots: Remove what malware leaves behind in Windows

  4. Step 4: Scan the PC, then run the offline scan

    A scan finds the parts of RDN/Trojan/Hacking File Detected" virus that the manual steps cannot see. In Windows Security > Virus & threat protection > Scan options, start a Full scan and quarantine what it reports.

    Follow it with Microsoft Defender Antivirus (offline scan) > Scan now, which restarts the PC and checks the disk while Windows and the malware are not running.

    It takes about 15 minutes and works the same in Windows 11 and Windows 10. If either scan finds something, run the full scan again after removal until it comes back clean.

    Windows Security Scan options with Microsoft Defender Antivirus offline scan selected
    Windows 11: Windows Security > Virus & threat protection > Scan options.

    Full procedure with screenshots: Run a Microsoft Defender Offline scan

  5. Step 5: Change passwords from another device and sign out other sessions

    RDN/Trojan/Hacking File Detected" virus can copy saved passwords, cookies and session tokens and send them out in seconds, so cleaning the PC does not undo the theft.

    Change your passwords on a device that was never infected, starting with the e-mail account, since every other reset goes through it. On each account, end all other sessions and check the recovery e-mail, phone number and forwarding rules.

    Then turn on two-step verification. Sign in on the Windows 11 or Windows 10 PC again only after the offline scan is clean.

    Full procedure with screenshots: Turn on two-step verification / secure a hacked account

Instructions for each browser and system

The detailed steps for every browser and system this guide covers. Open the one you use.

Uninstall from Windows

Below you can find manual adware removal guidelines.

Uninstall from Windows 10/8:

  1. Type Control Panel into the Windows search box and open the result.
  2. Under Programs, select Uninstall a program.Uninstall from Windows 10/8

Uninstall from Windows 7/XP:

  1. Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
  2. In Control Panel, select Programs > Uninstall a program.Uninstall from Windows 7/XP

Remove the unwanted program:

  1. In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
  2. If User Account Control appears, click Yes to confirm, then complete the removal.Uninstall the unwanted program from Windows
Remove from Google Chrome

These instructions will show you how to clean Google Chrome from "RDN/Trojan/Hacking File Detected" malware:

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

Change your homepage:

  1. Click menu and choose Settings.
  2. Look for a suspicious site in the On startup section.
  3. Click on Open a specific or set of pages and click on three dots to find the Remove option.

Reset Google Chrome:

If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings.Reset Chrome 2
Remove from Microsoft Edge

These steps will help you to clean Microsoft Edge:

Delete unwanted extensions from MS Edge:

  1. Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
  2. From the list, pick the extension and click on the Gear icon.
  3. Click Remove.Remove extensions from Edge

Clear cookies and other browser data:

  1. Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
  2. Under Clear browsing data, pick Choose what to clear.
  3. Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.Clear Edge browsing data

Restore new tab and homepage settings:

  1. Click the menu icon and choose Settings.
  2. Then find On startup section.
  3. Click Remove next to any suspicious startup page.

Reset MS Edge if the above steps did not work:

  1. Press on Ctrl + Shift + Esc to open Task Manager.
  2. Click on More details arrow at the bottom of the window.
  3. Select Details tab.
  4. Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.Reset MS Edge
Instructions for Chromium-based Edge

Delete extensions from MS Edge (Chromium):

  1. Open Edge and click select Settings > Extensions.
  2. Delete unwanted extensions by clicking Remove.Remove extensions from Chromium Edge

Clear cache and site data:

  1. Click on Menu and go to Settings.
  2. Select Privacy, search and services.
  3. Under Clear browsing data, pick Choose what to clear.
  4. Under Time range, pick All time.
  5. Select Clear now.Clear browser data from Chroum Edge

Reset Chromium-based MS Edge:

  1. Click on Menu and select Settings.
  2. On the left side, pick Reset settings.
  3. Select Restore settings to their default values.
  4. Confirm with Reset.
  5. This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.Reset Chromium Edge
Remove from Mozilla Firefox (FF)

"RDN/Trojan/Hacking File Detected" virus elimination instructions from Firefox:

Remove dangerous extensions:

  1. Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
  2. Select Add-ons.
  3. In here, select the unwanted extension and click Remove.Remove extensions from Firefox

Reset the homepage:

  1. Click three horizontal lines at the top right corner to open the menu.
  2. Choose Settings.
  3. Under Home, set your preferred homepage and new tab settings.

Clear cookies and site data:

  1. Click Menu and pick Settings.
  2. Go to Privacy & Security section.
  3. Scroll down to locate Cookies and Site Data.
  4. Click on Clear Data...
  5. Select Cookies and Site Data and Temporary cached files and pages, then click Clear.Clear cookies and site data from Firefox

Reset Mozilla Firefox

If clearing the browser as explained above did not help, reset Mozilla Firefox:

  1. Open Mozilla Firefox browser and click the Menu.
  2. Go to Help and then choose Troubleshooting Information.Reset Firefox 1
  3. Under Give Firefox a tune up section, click on Refresh Firefox...
  4. Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.Reset Firefox 2
Delete from Safari

Remove dangerous extensions:

  1. Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
  2. Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.Remove extensions from Safari

Clear history and website data:

  1. Click Safari in the menu and pick Clear History.
  2. Set Clear to all history and confirm with Clear History.Clear history from Safari

Reset Safari:

  1. Click Safari in the menu and select Preferences > Advanced.
  2. Enable Show Develop menu in menu bar.
  3. From the menu bar, click Develop and select Empty Caches.Reset Safari
Delete from macOS

Remove the unwanted application:

  1. From the menu bar, select Go > Applications.
  2. In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).Uninstall from Mac

Delete leftover files and folders:

  1. Select Go > Go to Folder.
  2. Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
  3. Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.Delete leftover files from Mac
  4. Finally, empty the Trash to permanently remove the leftovers.
Reset Internet Explorer

Follow these instructions to fix Internet Explorer after the hijack:

Remove dangerous add-ons:

  1. Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
  2. Pick Manage Add-ons.
  3. You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.Remove add-ons from Internet Explorer

Change your homepage if it was altered:

  1. Open IE and click on the Gear icon.
  2. Select Internet Options.
  3. In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
  4. Click Apply and then select OK.Reset IE homepage

Delete temporary files:

  1. Press on the Gear icon and select Internet Options.
  2. Under Browsing history, click Delete...
  3. Select relevant fields and press Delete.Clear temporary files from Internet Explorer

Reset Internet Explorer:

  1. Click on Gear icon > Internet options and select Advanced tab.
  2. Select Reset.
  3. In the new window, check Delete personal settings and select Reset.Reset Internet Explorer

After removal: passwords, accounts and prevention

Secure your accounts after the clean-up

Assume that whatever was saved in the browsers on this PC while the PC showed RDN/Trojan/Hacking File Detected" virus in the list of installed apps has been copied:

  • passwords
  • cookies
  • autofill data

Work from a clean device, or from this PC once the offline scan finds nothing.

Start with your main e-mail account, because it can reset everything else, then banking and payment, then social and gaming accounts. Change each password, sign out of all sessions and turn on two-step verification: Turn on two-step verification / secure a hacked account.

The full order, including crypto wallets and card replacement, is in securing your accounts after malware.

Do not let government spy on you

The government has many issues in regards to tracking users' data and spying on citizens, so you should take this into consideration and learn more about shady information gathering practices.

Avoid any unwanted government tracking or spying by going totally anonymous on the internet.

You can choose a different location when you go online and access any material you want without particular content restrictions. You can easily enjoy internet connection without any risks of being hacked by using VPN.

Control the information that can be accessed by government any other unwanted party and surf online without being spied on. Even if you are not involved in illegal activities or trust your selection of services, platforms, be suspicious for your own security and take precautionary measures by using the VPN service.

Backup files for the later use, in case of the malware attack

Computer users can suffer from data losses due to cyber infections or their own faulty doings.

Ransomware can encrypt and hold files hostage, while unforeseen power cuts might cause a loss of important documents. If you have proper up-to-date backups, you can easily recover after such an incident and get back to work. It is also equally important to update backups on a regular basis so that the newest information remains intact - you can set this process to be performed automatically.

When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware strikes out of nowhere. Use for the data restoration process.

Questions about RDN/Trojan/Hacking File Detected" virus

Is RDN/Trojan/Hacking File Detected" virus a virus?

Most programs that appear the way RDN/Trojan/Hacking File Detected" virus did are not viruses in the strict sense. They are potentially unwanted programs:

  • real software that arrives bundled with other downloads and then shows offers
  • changes browser settings
  • starts with Windows

Some are harmless, some are annoying and a few carry adware. What makes it worth removing is that you did not choose it.

Uninstall it from Installed apps and check the startup list and the browsers for anything added the same day. If it refuses to uninstall or returns after a restart, treat it as more serious and run a Microsoft Defender offline scan.

How do I stop programs like RDN/Trojan/Hacking File Detected" virus from being installed again?

Most unwanted programs arrive through installers, so the fix is in how you install software. Download programs from their official sites or the Microsoft Store, not from download portals or ads above search results. During setup, choose Custom or Advanced installation and untick every extra offer, including browsers, toolbars and optimizers.

Decline update prompts that appear inside other programs unless you know them. In Windows Security, turn on reputation-based protection and potentially unwanted app blocking. These steps would most likely have stopped RDN/Trojan/Hacking File Detected" virus before it reached the app list.

My antivirus was on. How did a trojan get past it?

Antivirus programs see a file only when it is written or run, and criminals test each new build against popular scanners before release. Detection catches up within hours or days, which is often after the first victims ran it.

Archives with passwords, installers that fetch the malware later, and scripts run through PowerShell make the job harder. That is why behaviour such as downloading cracks or pasting commands matters more than any setting. Keep Windows and Defender updated, and turn on Reputation-based protection in App & browser control.

How do I know if my PC has RDN/Trojan/Hacking File Detected" virus?

Often you do not, which is the point of a trojan. Possible signs are an antivirus alert naming RDN/Trojan/Hacking File Detected" virus or a generic trojan detection, unknown programs or scheduled tasks, processes with random names in Task Manager, browser extensions you did not add, security settings turned off, slower performance, or account alerts about logins from unknown places.

The reliable check is a full scan followed by Microsoft Defender's offline scan. If you recently ran a crack, a fake installer or a command a website told you to paste, scan even without symptoms.

Is it safe to do online banking after seeing RDN/Trojan/Hacking File Detected" virus in the list of installed apps?

Not on that PC until it is clean. A program that produces RDN/Trojan/Hacking File Detected" virus in the list of installed apps runs with your rights and could read what you type or what the browser shows. Use a phone or another computer for banking and for changing passwords.

When the offline scan of the affected PC is clean and nothing suspicious starts with Windows any more, you can go back to using it. Check your bank statements for the past weeks either way, and call the bank if anything looks unfamiliar; banks can block cards and reset access quickly.

Do I need to reinstall Windows to get rid of RDN/Trojan/Hacking File Detected" virus?

Usually not. A thorough clean-up is enough when the offline scan finds nothing afterwards and you do not see RDN/Trojan/Hacking File Detected" virus in the list of installed apps again. A reset is the safer choice if an attacker had remote control, if security tools were switched off, or if detections come back after every clean-up.

Windows 11 can reset itself without a USB stick under Settings > System > Recovery > Reset this PC. Copy documents and photos out first and scan the copies. A reset does not change passwords or undo stolen data, so the account steps still apply.

I found AnyDesk or ScreenConnect that I did not install. Is that RDN/Trojan/Hacking File Detected" virus?

Not necessarily RDN/Trojan/Hacking File Detected" virus, but it is a warning sign. These are legitimate remote support tools, and criminals use them as ready-made backdoors, especially after tech support scams or fake invoice calls.

If you did not install it and no one you trust set it up, uninstall it, change passwords from a clean device and check your bank account. If someone connected to your PC through it, follow the steps for remote access trojans and consider a Windows reset. Installed apps sorted by date shows when it appeared.

Why can't I find RDN/Trojan/Hacking File Detected" virus in antivirus databases?

Because it is new or because it is listed under a different name. Antivirus companies name threats after the family they belong to, and a program that appears as RDN/Trojan/Hacking File Detected" virus on your PC may carry a generic or unrelated label in their databases.

Many new samples are first detected only by behaviour, without a family name. What you saw, RDN/Trojan/Hacking File Detected" virus in the list of installed apps, is enough to act on:

  • end the program
  • remove its startup entry
  • run a Microsoft Defender offline scan
  • secure your accounts

A detection name from a scan is worth noting for later.

Should I check my other computers too?

Yes, it takes little time and removes doubt. RDN/Trojan/Hacking File Detected" virus itself usually stays on one PC, but the download that carried it may have been copied to other computers, shared drives may hold the same installer, and an attacker who had access could have tried saved passwords on other devices.

Run a full scan on every Windows PC in the home or office, check shared folders for the original download, and change Wi-Fi and router passwords if they were stored on the infected machine.

Will Fortect remove RDN/Trojan/Hacking File Detected" virus?

Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.

For RDN/Trojan/Hacking File Detected" virus, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.

Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.

Sources

More removal guides

Remove Immediate Action Required

Immediate Action Required is a fake notification that might pop-up out of nowhere and prompt users to download useless bogus software Immediate Action Required is a scam that users mightAdwareMedium riskUgnius Kiguolis ·

Remove ReceiverHelper Mac virus

ReceiverHelper virus is a high threat to your personal safety and Mac security ReceiverHelper is a harmful application targeting Mac devices, classified under the Adload malware family. It is notoriousAdwareMedium riskJake Doevan ·

Remove Casalemedia

Casalemedia is a legal advertising service but is sometimes abused by crooks to gain personal income Casalemedia is a legitimate advertising service that provides assistance in monetizing on online contentAdwareMedium riskJake Doevan ·

Remove D1ue3yi0hkdsdl.cloudfront.net ads

D1ue3yi0hkdsdl.cloudfront.net ads is the content related to scam campaigns and fake errors or warnings D1ue3yi0hkdsdl.cloudfront.net is the program that causes notifications and advertisements that may appear unexpectedly, preventing you fromAdwareMedium riskJulie Splinters ·

Questions and experiences: RDN/Trojan/Hacking File Detected" virus

Still seeing it, or found something we did not cover? Ask here: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

5,442 members already hereReading, writing, commenting and voting. 0 verified · 167 joined this year